linux-kernel - Re: SMACK or SELinux, but not both

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 26 Feb 2008 20:28:43 +1100 (EST)
From:	James Morris <jmorris@...ei.org>
To:	Alexey Dobriyan <adobriyan@...ru>
cc:	linux-kernel@...r.kernel.org, sds@...ho.nsa.gov,
	eparis@...isplace.org, casey@...aufler-ca.com
Subject: Re: SMACK or SELinux, but not both

On Tue, 26 Feb 2008, Alexey Dobriyan wrote:

> If SELinux is registered before SMACK, SMACK panics after
> register_security() call.
> 
> If SMACK is registered before SELinux, SELinux panics after
> register_security() call.
> 
> Consequently allmodconfig kernel doesn't boot. It would be nice if
> some Kconfig magic to exclude each other will be in place.

People want to be able to select the security model at boot time, so the 
option to build both LSMs is required.

You can stop SELinux from attempting to register as an LSM via selinux=0, 
which should allow you to boot with just Smack enabled.


- James
-- 
James Morris
<jmorris@...ei.org>
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/